Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Help my pc is out of control with pop ups and redirects

Started by Brenda50 , Oct 11 2014 05:55 PM

malware redirects pop ups

This topic is locked

#1
Brenda50

Posted 11 October 2014 - 05:55 PM

Member

Member
30 posts

Please help my pc is out of control as if it is possessed the moment I go on line and even before. I don't even recognize my google browser instead I get something called Safe Finder and all kinds of pop ups telling me to upgrade all sort of things. Here is my otl report as your site suggested

OTL logfile created on: 10/11/2014 6:28:46 PM - Run 2

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Brenda\Downloads

64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17278)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.88 Gb Total Physical Memory | 2.40 Gb Available Physical Memory | 61.66% Memory free

6.01 Gb Paging File | 3.92 Gb Available in Paging File | 65.20% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 455.90 Gb Total Space | 330.57 Gb Free Space | 72.51% Space Free | Partition Type: NTFS

Computer Name: BRENDAPC | User Name: Brenda | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/10/10 13:17:27 | 000,383,896 | ---- | M] (HQuality3V05.10) -- C:\Program Files (x86)\HQuality-v3V05.10\22eb117c-b529-406e-8f0f-d191202cd9b1.exe

PRC - [2014/10/10 13:16:51 | 001,318,808 | ---- | M] (HQuality3V05.10) -- C:\Program Files (x86)\HQuality-v3V05.10\4e250024-6600-404c-ba9b-838317176ea2-6.exe

PRC - [2014/10/10 13:16:11 | 000,068,608 | ---- | M] (globalUpdate) -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe

PRC - [2014/09/29 01:38:12 | 004,834,816 | ---- | M] () -- C:\Windows\score.exe

PRC - [2014/08/27 16:34:56 | 000,034,848 | ---- | M] () -- C:\Program Files (x86)\LPT\srptsl.exe

PRC - [2014/08/27 16:34:56 | 000,032,800 | ---- | M] () -- C:\Program Files (x86)\LPT\srpts.exe

PRC - [2014/08/27 16:34:56 | 000,023,072 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srptm.exe

PRC - [2014/08/27 16:34:22 | 000,028,192 | ---- | M] (Smartbar) -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.exe

PRC - [2014/08/27 16:33:50 | 000,023,584 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Lrcnta.exe

PRC - [2014/08/04 19:37:28 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Brenda\Downloads\OTL.exe

PRC - [2014/05/22 10:44:36 | 001,082,240 | ---- | M] () -- C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe

PRC - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

PRC - [2014/03/18 06:13:58 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WWAHost.exe

PRC - [2013/09/19 08:46:58 | 000,250,200 | ---- | M] (Garmin Ltd or its subsidiaries) -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe

PRC - [2012/12/26 02:41:44 | 000,081,536 | ---- | M] (Atheros) -- C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe

PRC - [2012/11/28 11:05:52 | 004,047,208 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe

PRC - [2012/11/26 00:19:48 | 000,492,904 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe

PRC - [2012/11/26 00:18:54 | 001,914,728 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe

PRC - [2012/07/17 21:10:32 | 000,364,416 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

PRC - [2012/07/17 21:10:30 | 000,276,864 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

PRC - [2012/07/17 21:10:16 | 000,165,760 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe

PRC - [2012/07/09 17:47:14 | 000,007,168 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

PRC - [2012/06/07 23:34:06 | 000,111,120 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

PRC - [2012/06/02 00:47:48 | 000,143,888 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

PRC - [2012/03/26 17:35:16 | 000,449,168 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

PRC - [2008/11/09 16:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

========== Modules (No Company Name) ==========

MOD - [2014/09/18 00:07:58 | 008,013,664 | ---- | M] () -- C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll

MOD - [2014/09/18 00:07:58 | 000,118,784 | ---- | M] () -- C:\WINDOWS\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll

MOD - [2014/09/18 00:07:57 | 000,146,464 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll

MOD - [2014/09/14 20:58:04 | 001,840,640 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\0e8df08ded9407504af7dc9af2f9823a\System.Web.Services.ni.dll

MOD - [2014/09/14 20:57:59 | 011,926,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\c3f52de50de9e5a83295ac536b8d8760\System.Web.ni.dll

MOD - [2014/09/14 08:44:18 | 007,785,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\462e6667cb4ef74abec9524d96c4d7d5\System.Xml.ni.dll

MOD - [2014/09/14 08:44:18 | 000,392,704 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\11074f4f817acf22f6b7e1ca2a634aae\System.Xml.Linq.ni.dll

MOD - [2014/09/14 08:44:11 | 001,874,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\dd08601ab40a3c0743ee8d7b4350debe\System.Xaml.ni.dll

MOD - [2014/09/14 08:44:09 | 012,856,832 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\cc272fa4bc8ae7c468e3c75a57ae3c72\System.Windows.Forms.ni.dll

MOD - [2014/09/14 08:43:31 | 001,169,920 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\aa464a63150c9ca092f10c752091c73b\System.Management.ni.dll

MOD - [2014/09/14 08:43:30 | 001,635,328 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\9e99d85dfa5a3de8e34fe912acf82021\System.Drawing.ni.dll

MOD - [2014/09/14 08:43:19 | 000,968,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\04d455ea050b547ca661a16509fe4638\System.Configuration.ni.dll

MOD - [2014/09/14 08:43:18 | 000,463,360 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\165bbf987a17d5254aeb43e769ab02f7\PresentationFramework.Aero2.ni.dll

MOD - [2014/09/14 08:43:16 | 018,744,320 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\201ff175176fa9f3f7930492d6f8e140\PresentationFramework.ni.dll

MOD - [2014/09/14 08:43:00 | 011,027,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\137698b247bb9989ebaf0a9c9528f17a\PresentationCore.ni.dll

MOD - [2014/09/14 08:42:50 | 003,957,760 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\358c6ca55986bf6ef35d4de5806f3f99\WindowsBase.ni.dll

MOD - [2014/09/13 17:32:20 | 006,951,424 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\5e8ea4bc2ddce0edd65f5c68b7241c06\System.Core.ni.dll

MOD - [2014/09/13 17:31:24 | 010,003,456 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\3028925cf331e81d2b55093a3f131bd5\System.ni.dll

MOD - [2014/08/27 16:35:00 | 000,070,176 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srut.dll

MOD - [2014/08/27 16:35:00 | 000,070,176 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srut.dll

MOD - [2014/08/27 16:34:58 | 000,029,216 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srsbs.dll

MOD - [2014/08/27 16:34:56 | 000,023,072 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srptm.exe

MOD - [2014/08/27 16:34:54 | 000,081,952 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srpt.dll

MOD - [2014/08/27 16:34:54 | 000,042,528 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srptc.dll

MOD - [2014/08/27 16:34:52 | 000,031,264 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srom.dll

MOD - [2014/08/27 16:34:52 | 000,024,608 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srpdm.dll

MOD - [2014/08/27 16:34:52 | 000,024,608 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srpdm.dll

MOD - [2014/08/27 16:34:48 | 000,255,008 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srns.dll

MOD - [2014/08/27 16:34:46 | 000,047,136 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srbu.dll

MOD - [2014/08/27 16:34:46 | 000,047,136 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\srbu.dll

MOD - [2014/08/27 16:34:46 | 000,027,680 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\sreu.dll

MOD - [2014/08/27 16:34:44 | 000,086,048 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\srau.dll

MOD - [2014/08/27 16:34:42 | 000,067,616 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\sppsm.dll

MOD - [2014/08/27 16:34:42 | 000,067,616 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\sppsm.dll

MOD - [2014/08/27 16:34:42 | 000,066,592 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\spbl.dll

MOD - [2014/08/27 16:34:42 | 000,030,752 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\smtu.dll

MOD - [2014/08/27 16:34:40 | 000,150,560 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\smti.dll

MOD - [2014/08/27 16:34:40 | 000,073,760 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\smsp.dll

MOD - [2014/08/27 16:34:40 | 000,038,432 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\smta.dll

MOD - [2014/08/27 16:34:34 | 000,061,984 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll

MOD - [2014/08/27 16:34:34 | 000,035,360 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll

MOD - [2014/08/27 16:34:32 | 000,158,240 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll

MOD - [2014/08/27 16:34:32 | 000,158,240 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll

MOD - [2014/08/27 16:34:32 | 000,027,168 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll

MOD - [2014/08/27 16:34:32 | 000,027,168 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Smartbar.Personalization.Common.dll

MOD - [2014/08/27 16:34:30 | 000,044,064 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyService.dll

MOD - [2014/08/27 16:34:26 | 000,165,920 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll

MOD - [2014/08/27 16:34:26 | 000,165,920 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll

MOD - [2014/08/27 16:34:26 | 000,065,568 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll

MOD - [2014/08/27 16:34:24 | 002,425,376 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll

MOD - [2014/08/27 16:34:24 | 000,050,208 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll

MOD - [2014/08/27 16:34:24 | 000,014,880 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll

MOD - [2014/08/27 16:34:22 | 000,696,864 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll

MOD - [2014/08/27 16:34:22 | 000,078,880 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll

MOD - [2014/08/27 16:34:18 | 000,014,368 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\siem.dll

MOD - [2014/08/27 16:34:18 | 000,011,808 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\sidc.dll

MOD - [2014/08/27 16:34:16 | 000,193,056 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\sgmu.dll

MOD - [2014/08/27 16:34:16 | 000,024,096 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\sgml.dll

MOD - [2014/08/27 16:34:02 | 000,018,976 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Smartbar.Common.dll

MOD - [2014/08/27 16:33:58 | 000,026,144 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\ProxySettings.dll

MOD - [2014/08/27 16:33:56 | 000,052,768 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Proxy.Lib.dll

MOD - [2014/08/27 16:33:52 | 000,043,552 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\MACTrackBarLib.dll

MOD - [2014/08/27 16:33:50 | 000,032,800 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\lrcnt.dll

MOD - [2014/08/27 16:33:50 | 000,023,584 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\Lrcnta.exe

MOD - [2014/08/26 14:13:42 | 000,059,392 | ---- | M] () -- C:\Users\Brenda\AppData\Local\LPT\Community.CsharpSqlite.SQLiteClient.dll

MOD - [2014/08/14 09:56:22 | 000,627,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\487db41fefa880fce5153664d6bc4bc6\System.Transactions.ni.dll

MOD - [2014/08/14 09:56:04 | 000,141,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\1d3f8028ffcdf8e9393d664dfa4f87b3\System.Configuration.Install.ni.dll

MOD - [2014/08/14 09:56:02 | 000,978,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\27dc8e491e32361eaff0b88f0befc197\System.Configuration.ni.dll

MOD - [2014/08/14 09:55:28 | 000,220,672 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\314786c0ad6b74f19b64f46ea84a90ac\CustomMarshalers.ni.dll

MOD - [2014/08/14 09:55:23 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\a8a310b81c76f8e79a1a7fc309a098bf\Accessibility.ni.dll

MOD - [2014/08/13 12:16:04 | 005,467,136 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\8006a5df62f0c127d15db16d3a8c68f8\System.Xml.ni.dll

MOD - [2014/08/13 12:15:57 | 012,436,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6ec0cbaebf2932db68d8cc77b5e9b4e9\System.Windows.Forms.ni.dll

MOD - [2014/08/13 12:15:47 | 001,051,136 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\8d2ca09eec4f48222ac4acc00b68a376\System.Management.ni.dll

MOD - [2014/08/13 12:15:46 | 001,593,344 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\f6ff4eab6e6bb587d62c3975fcbbca30\System.Drawing.ni.dll

MOD - [2014/08/13 12:15:44 | 006,657,024 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\3cd1588d00d2f95ec8d6e581e7f3c577\System.Data.ni.dll

MOD - [2014/08/13 12:15:05 | 003,350,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsBase\bf4490c2ed2831228e646e48da1df643\WindowsBase.ni.dll

MOD - [2014/08/13 12:15:00 | 007,993,856 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\a500ec9c4638c6ba200d7b55324709f2\System.ni.dll

MOD - [2014/08/13 12:14:53 | 011,500,032 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\5bd3374f05d46ba0563f44d032209f08\mscorlib.ni.dll

MOD - [2014/08/13 02:08:27 | 002,972,672 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

MOD - [2014/08/13 02:08:27 | 000,261,632 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

MOD - [2014/08/13 02:08:27 | 000,069,120 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

MOD - [2014/08/13 02:08:24 | 000,745,472 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

MOD - [2014/07/31 12:16:44 | 000,073,544 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2014/07/31 12:16:12 | 001,044,776 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2014/05/22 10:44:36 | 001,082,240 | ---- | M] () -- C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe

MOD - [2014/05/12 11:21:54 | 000,061,440 | ---- | M] () -- C:\Users\Brenda\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll

MOD - [2014/03/18 06:13:46 | 017,395,376 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\c90ef9a73ea0044641d31b19023aad61\mscorlib.ni.dll

MOD - [2013/08/03 00:41:51 | 000,172,032 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll

MOD - [2013/08/03 00:41:51 | 000,098,304 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll

MOD - [2012/06/08 15:34:06 | 000,016,400 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

MOD - [2012/06/07 23:34:06 | 000,627,216 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

========== Services (SafeList) ==========

SRV:64bit: - [2014/10/10 21:11:53 | 000,172,344 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE -- (!SASCORE)

SRV:64bit: - [2014/09/12 10:53:37 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:64bit: - [2014/08/13 02:14:40 | 001,306,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)

SRV:64bit: - [2014/08/13 02:14:39 | 000,834,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)

SRV:64bit: - [2014/08/13 02:02:49 | 000,347,880 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)

SRV:64bit: - [2014/08/13 02:02:49 | 000,023,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)

SRV:64bit: - [2014/08/13 02:01:58 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)

SRV:64bit: - [2014/08/13 02:01:58 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)

SRV:64bit: - [2014/07/24 09:41:39 | 002,898,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)

SRV:64bit: - [2014/07/24 03:28:58 | 001,600,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)

SRV:64bit: - [2014/05/21 00:33:44 | 000,314,696 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)

SRV:64bit: - [2014/03/18 06:13:26 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)

SRV:64bit: - [2014/03/18 06:13:25 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)

SRV:64bit: - [2014/03/18 06:13:20 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)

SRV:64bit: - [2014/03/18 06:13:18 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)

SRV:64bit: - [2014/03/18 06:13:18 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)

SRV:64bit: - [2014/03/18 06:13:14 | 000,399,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)

SRV:64bit: - [2014/03/18 06:13:14 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)

SRV:64bit: - [2014/03/18 06:13:13 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)

SRV:64bit: - [2013/08/22 07:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)

SRV:64bit: - [2013/08/22 07:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)

SRV:64bit: - [2013/08/22 07:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)

SRV:64bit: - [2013/08/22 07:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)

SRV:64bit: - [2013/08/22 07:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)

SRV:64bit: - [2013/08/22 06:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)

SRV:64bit: - [2013/08/22 06:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)

SRV:64bit: - [2013/08/22 06:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)

SRV:64bit: - [2013/08/22 05:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)

SRV:64bit: - [2013/08/22 05:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)

SRV:64bit: - [2013/08/22 05:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)

SRV:64bit: - [2013/08/22 05:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)

SRV:64bit: - [2013/08/22 05:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)

SRV:64bit: - [2013/08/22 05:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)

SRV:64bit: - [2013/08/22 05:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)

SRV:64bit: - [2013/08/22 05:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)

SRV:64bit: - [2012/08/31 19:24:58 | 000,201,360 | ---- | M] (Realtek Semiconductor) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService)

SRV:64bit: - [2012/04/20 18:16:12 | 000,635,104 | ---- | M] (Intel® Corporation) [Auto | Running] -- c:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel®

SRV:64bit: - [2009/11/17 21:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)

SRV - [2014/10/10 13:16:11 | 000,068,608 | ---- | M] (globalUpdate) [On_Demand | Stopped] -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdatem)

SRV - [2014/10/10 13:16:11 | 000,068,608 | ---- | M] (globalUpdate) [Auto | Stopped] -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdate)

SRV - [2014/09/29 01:38:12 | 004,834,816 | ---- | M] () [Auto | Running] -- C:\Windows\score.exe -- (scores)

SRV - [2014/08/27 16:34:56 | 000,032,800 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\LPT\srpts.exe -- (LPTSystemUpdater)

SRV - [2014/08/13 02:01:58 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)

SRV - [2014/07/24 09:41:39 | 002,898,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)

SRV - [2014/05/21 00:33:48 | 000,278,344 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)

SRV - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)

SRV - [2013/09/19 08:46:58 | 000,250,200 | ---- | M] (Garmin Ltd or its subsidiaries) [Auto | Running] -- C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe -- (Garmin Core Update Service)

SRV - [2013/08/21 23:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)

SRV - [2013/08/21 22:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)

SRV - [2012/12/28 14:41:58 | 000,226,944 | ---- | M] (Qualcomm Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe -- (AtherosSvc)

SRV - [2012/12/26 02:41:44 | 000,081,536 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Dell Wireless\Ath_WlanAgent.exe -- (ZAtheros Wlan Agent)

SRV - [2012/11/26 00:18:54 | 001,914,728 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe -- (SftService)

SRV - [2012/07/17 21:10:32 | 000,364,416 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)

SRV - [2012/07/17 21:10:30 | 000,276,864 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)

SRV - [2012/07/17 21:10:16 | 000,165,760 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)

SRV - [2012/07/09 17:47:14 | 000,007,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)

SRV - [2012/06/19 18:33:06 | 000,173,056 | ---- | M] (Dell Products, LP.) [Auto | Stopped] -- c:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe -- (DellDigitalDelivery)

SRV - [2008/11/09 16:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2014/08/14 20:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)

DRV:64bit: - [2014/08/13 02:14:40 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)

DRV:64bit: - [2014/08/13 02:14:40 | 000,136,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)

DRV:64bit: - [2014/08/13 02:14:39 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)

DRV:64bit: - [2014/08/13 02:03:14 | 000,055,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)

DRV:64bit: - [2014/08/13 02:02:49 | 000,257,880 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)

DRV:64bit: - [2014/08/13 02:02:49 | 000,123,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)

DRV:64bit: - [2014/08/13 02:02:49 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)

DRV:64bit: - [2014/08/04 11:40:48 | 000,061,528 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{6eaeb8af-e4d9-4df5-b9d7-815f2928cdf7}w64.sys -- ({6eaeb8af-e4d9-4df5-b9d7-815f2928cdf7}w64)

DRV:64bit: - [2014/08/04 11:40:48 | 000,061,528 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{6eaeb8af-e4d9-4df5-b9d7-815f2928cdf7}Gw64.sys -- ({6eaeb8af-e4d9-4df5-b9d7-815f2928cdf7}Gw64)

DRV:64bit: - [2014/07/24 11:28:38 | 000,468,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)

DRV:64bit: - [2014/07/24 11:28:38 | 000,412,992 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)

DRV:64bit: - [2014/07/24 07:42:22 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)

DRV:64bit: - [2014/05/21 00:33:36 | 003,791,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2014/05/12 07:26:14 | 000,064,216 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl)

DRV:64bit: - [2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)

DRV:64bit: - [2014/05/06 18:39:17 | 000,038,296 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)

DRV:64bit: - [2014/05/06 18:39:17 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)

DRV:64bit: - [2014/03/18 06:13:19 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS)

DRV:64bit: - [2014/03/18 06:13:15 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)

DRV:64bit: - [2014/03/18 06:13:02 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)

DRV:64bit: - [2014/03/18 06:13:01 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)

DRV:64bit: - [2014/03/18 06:13:01 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)

DRV:64bit: - [2014/03/18 06:13:01 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)

DRV:64bit: - [2014/03/18 06:13:01 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)

DRV:64bit: - [2014/03/18 06:13:01 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)

DRV:64bit: - [2014/03/18 06:13:01 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)

DRV:64bit: - [2014/03/18 06:13:00 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)

DRV:64bit: - [2014/03/18 06:13:00 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)

DRV:64bit: - [2014/03/18 06:13:00 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)

DRV:64bit: - [2014/03/18 05:45:47 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2014/03/18 05:45:41 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)

DRV:64bit: - [2013/08/22 09:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)

DRV:64bit: - [2013/08/22 09:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2013/08/22 08:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)

DRV:64bit: - [2013/08/22 08:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)

DRV:64bit: - [2013/08/22 08:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)

DRV:64bit: - [2013/08/22 08:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)

DRV:64bit: - [2013/08/22 08:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)

DRV:64bit: - [2013/08/22 08:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2013/08/22 08:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2013/08/22 08:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)

DRV:64bit: - [2013/08/22 08:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2013/08/22 08:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)

DRV:64bit: - [2013/08/22 08:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)

DRV:64bit: - [2013/08/22 08:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2013/08/22 08:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2013/08/22 08:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)

DRV:64bit: - [2013/08/22 08:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2013/08/22 08:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)

DRV:64bit: - [2013/08/22 08:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)

DRV:64bit: - [2013/08/22 08:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2013/08/22 08:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)

DRV:64bit: - [2013/08/22 08:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)

DRV:64bit: - [2013/08/22 08:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2013/08/22 08:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)

DRV:64bit: - [2013/08/22 08:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)

DRV:64bit: - [2013/08/22 08:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)

DRV:64bit: - [2013/08/22 08:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)

DRV:64bit: - [2013/08/22 08:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)

DRV:64bit: - [2013/08/22 08:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)

DRV:64bit: - [2013/08/22 07:39:58 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)

DRV:64bit: - [2013/08/22 07:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)

DRV:64bit: - [2013/08/22 07:39:50 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)

DRV:64bit: - [2013/08/22 07:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)

DRV:64bit: - [2013/08/22 07:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)

DRV:64bit: - [2013/08/22 07:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)

DRV:64bit: - [2013/08/22 07:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)

DRV:64bit: - [2013/08/22 07:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)

DRV:64bit: - [2013/08/22 07:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)

DRV:64bit: - [2013/08/22 07:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)

DRV:64bit: - [2013/08/22 07:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)

DRV:64bit: - [2013/08/22 07:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)

DRV:64bit: - [2013/08/22 07:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)

DRV:64bit: - [2013/08/22 07:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)

DRV:64bit: - [2013/08/22 07:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2013/08/22 07:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)

DRV:64bit: - [2013/08/22 07:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2013/08/22 07:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)

DRV:64bit: - [2013/08/22 07:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)

DRV:64bit: - [2013/08/22 07:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)

DRV:64bit: - [2013/08/22 07:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)

DRV:64bit: - [2013/08/22 07:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)

DRV:64bit: - [2013/08/22 07:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)

DRV:64bit: - [2013/08/22 04:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)

DRV:64bit: - [2013/08/12 19:25:46 | 000,017,624 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)

DRV:64bit: - [2013/08/09 20:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)

DRV:64bit: - [2013/07/30 14:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)

DRV:64bit: - [2013/07/25 15:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)

DRV:64bit: - [2013/06/18 10:46:17 | 000,591,360 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)

DRV:64bit: - [2012/12/28 14:19:48 | 000,578,792 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)

DRV:64bit: - [2012/12/28 14:19:40 | 000,136,424 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)

DRV:64bit: - [2012/12/28 14:19:38 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)

DRV:64bit: - [2012/12/28 14:19:38 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)

DRV:64bit: - [2012/12/28 14:19:36 | 000,115,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)

DRV:64bit: - [2012/12/28 14:19:36 | 000,089,320 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)

DRV:64bit: - [2012/12/28 14:19:36 | 000,033,944 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)

DRV:64bit: - [2012/12/28 14:19:34 | 000,345,832 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)

DRV:64bit: - [2012/12/16 20:21:30 | 003,735,040 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athw8x.sys -- (athr)

DRV:64bit: - [2012/10/27 02:02:10 | 000,651,832 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)

DRV:64bit: - [2012/09/20 20:39:12 | 000,454,968 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)

DRV:64bit: - [2012/09/20 20:39:10 | 000,043,832 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)

DRV:64bit: - [2012/09/20 20:39:10 | 000,041,272 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Smb_driver_AMDASF.sys -- (SmbDrv)

DRV:64bit: - [2012/08/21 14:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2012/08/05 02:22:10 | 000,010,752 | ---- | M] (OSR Open Systems Resources, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DellRbtn.sys -- (DellRbtn)

DRV:64bit: - [2012/07/02 19:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)

DRV:64bit: - [2012/06/25 14:24:50 | 000,092,536 | ---- | M] (CyberLink) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\CLVirtualDrive.sys -- (CLVirtualDrive)

DRV:64bit: - [2012/06/19 12:40:50 | 000,342,528 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)

DRV:64bit: - [2012/06/15 04:50:46 | 000,315,536 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR)

DRV:64bit: - [2011/07/22 12:26:56 | 000,014,928 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV)

DRV:64bit: - [2011/07/12 17:55:18 | 000,012,368 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {8241E8F1-A9EE-4F50-8FF2-97657CCCABB8}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE:64bit: - HKLM\..\SearchScopes\{8241E8F1-A9EE-4F50-8FF2-97657CCCABB8}: "URL" = http://www.bing.com/...E10TR&pc=MDDCJS

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}

IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...q={searchTerms}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.c...q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.c...q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.zyngaplayersupport.com [Binary data over 200 bytes]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.c...Z-ajrppXLIGHMtg,

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.c...q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.c...q={searchTerms}

IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn6\yt.dll (Yahoo! Inc.)

IE - HKCU\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}

IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...q={searchTerms}

IE - HKCU\..\SearchScopes\{8241E8F1-A9EE-4F50-8FF2-97657CCCABB8}: "URL" = http://www.bing.com/...E10TR&pc=MDDCJS

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)

FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\WINDOWS\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@popularscreensavers.com/Plugin: C:\Program Files (x86)\PopularScreensavers\NPp5Stub.dll (popularscreensavers.com)

FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)

FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Brenda\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Brenda\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\ConsumerInput@Compete: C:\Program Files (x86)\Consumer Input\Firefox\ciff-3.2.0-12039.xpi [2014/09/23 09:12:30 | 000,510,118 | ---- | M] ()

[2014/01/21 11:10:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Brenda\AppData\Roaming\mozilla\Extensions

File not found (No name found) -- C:\PROGRAM FILES (X86)\BETTERSURF\BETTERSURFPLUS\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIABUZZV1\MEDIABUZZV1MODE3344\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAPLAYERV1\MEDIAPLAYERV1ALPHA485\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAVIEWERV1\MEDIAVIEWERV1ALPHA221\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAVIEWV1\MEDIAVIEWV1ALPHA1935\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAVIEWV1\MEDIAVIEWV1ALPHA9027\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAWATCHV1\MEDIAWATCHV1HOME831\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\RICHMEDIAVIEWV1\RICHMEDIAVIEWV1RELEASE7142\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\TRUSTMEDIAVIEWERV1\TRUSTMEDIAVIEWERV1ALPHA2867\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\VIDEOPLAYERV3\VIDEOPLAYERV3BETA1213\FF

File not found (No name found) -- C:\PROGRAM FILES (X86)\WEBEXPENHANCEDV1\WEBEXPENHANCEDV1ALPHA42\FF

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: http://feed.snapdo.c...Z-ajrppXLIGHMtg,

CHR - Extension: Yahoo Extension = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag\1.0.1.117_0\

CHR - Extension: Yahoo Extension = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag\1.0.1.450_0\

CHR - Extension: HQuality-v3V05.10 = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb\1.26.53_0\

CHR - Extension: Google Wallet = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: Yahoo Extension = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag\1.0.1.117_0\

CHR - Extension: Yahoo Extension = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\eihhgekonheiliaidomffpplfhecmkag\1.0.1.450_0\

CHR - Extension: HQuality-v3V05.10 = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb\1.26.53_0\

CHR - Extension: Google Wallet = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

O1 HOSTS File: ([2013/08/22 09:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (HQuality-v3V05.10) - {11111111-1111-1111-1111-110611171162} - C:\Program Files (x86)\HQuality-v3V05.10\HQuality-v3V05.10-bho64.dll (HQuality3V05.10)

O2:64bit: - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - No CLSID value found.

O2:64bit: - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn6\yt.dll (Yahoo! Inc.)

O2 - BHO: (HQuality-v3V05.10) - {11111111-1111-1111-1111-110611171162} - C:\Program Files (x86)\HQuality-v3V05.10\HQuality-v3V05.10-bho.dll (HQuality3V05.10)

O2 - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - No CLSID value found.

O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

O2 - BHO: (Rich Media View) - {59dcb6e8-6cc8-4903-a78c-00356115d270} - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release7142\ie\RichMediaViewV1release7142.dll File not found

O2 - BHO: (no name) - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - No CLSID value found.

O3:64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.

O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn6\yt.dll (Yahoo! Inc.)

O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

O4:64bit: - HKLM..\Run: [BtPreLoad] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtPreLoad.exe ()

O4:64bit: - HKLM..\Run: [DellWPF] C:\Program Files\Synaptics\SynTP\DellTouchpad.exe ()

O4:64bit: - HKLM..\Run: [QuickSet] c:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)

O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (CANON INC.)

O4 - HKLM..\Run: [CLMLServer_For_P2G8] C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (CyberLink)

O4 - HKLM..\Run: [CLVirtualDrive] C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe (CyberLink Corp.)

O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)

O4 - HKLM..\Run: [IJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (CANON INC.)

O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)

O4 - HKCU..\Run: [Browser Infrastructure Helper] C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.exe (Smartbar)

O4 - HKCU..\Run: [GarminExpressTrayApp] C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe (Garmin Ltd or its subsidiaries)

O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe" (Qualcomm Atheros Commnucations)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\SearchScopes present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255

O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found

O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105 File not found

O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Domains: genieo.com ([search] http in Trusted sites)

O15 - HKCU\..Trusted Ranges: Range1 ([*] in Trusted sites)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0A208A2D-31F3-4054-A7C3-77DEA77EDF72}: DhcpNameServer = 10.100.25.50 10.10.1.56 10.10.1.57

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5469380C-05E5-474B-B8CB-FA6ABBE08F6F}: DhcpNameServer = 192.168.1.1

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O20:64bit: - AppInit_DLLs: (C:\Users\Brenda\AppData\Local\Smartbar\Application\Resources\crdlil64.dll) - C:\Users\Brenda\AppData\Local\Smartbar\Application\Resources\crdlil64.dll ()

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O30 - LSA: Security Packages - (livessp) - File not found

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014/10/11 14:45:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Config

[2014/10/11 14:44:56 | 000,000,000 | R--D | C] -- C:\Users\Brenda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

[2014/10/10 13:18:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Setup Support for Consumer Input

[2014/10/10 13:18:44 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Roaming\Compete

[2014/10/10 13:18:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Consumer Input

[2014/10/10 13:17:06 | 001,544,600 | ---- | C] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\CYHPK.exe

[2014/10/10 13:16:31 | 002,015,640 | ---- | C] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\OQERG.exe

[2014/10/10 13:16:13 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Local\globalUpdate

[2014/10/10 13:16:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\globalUpdate

[2014/10/10 13:16:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HQuality-v3V05.10

[2014/09/30 18:01:28 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Roaming\SUPERAntiSpyware.com

[2014/09/30 18:01:21 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com

[2014/09/18 00:09:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LPT

[2014/09/18 00:07:55 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Local\LPT

[2014/09/18 00:07:54 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Local\Smartbar

[2014/09/17 10:23:02 | 002,084,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe

[2014/09/17 10:23:01 | 013,423,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll

[2014/09/17 10:23:01 | 002,374,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

[2014/09/17 10:23:01 | 000,796,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll

[2014/09/17 10:22:58 | 011,818,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll

[2014/09/17 10:22:56 | 002,860,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll

[2014/09/17 10:22:56 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll

[2014/09/17 10:22:55 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll

[2014/09/17 10:22:34 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSDMon.dll

[2014/09/17 10:22:34 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcpmon.dll

[2014/09/17 10:19:11 | 016,874,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll

[2014/09/17 10:19:09 | 002,642,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll

[2014/09/17 10:19:09 | 002,318,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll

[2014/09/17 10:19:04 | 012,730,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll

[2014/09/17 10:19:00 | 006,649,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll

[2014/09/17 10:18:58 | 008,652,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll

[2014/09/17 10:18:57 | 007,424,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe

[2014/09/17 10:18:55 | 005,777,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll

[2014/09/17 10:18:54 | 002,389,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll

[2014/09/17 10:18:50 | 002,696,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers.dll

[2014/09/17 10:18:41 | 002,141,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll

[2014/09/17 10:18:35 | 002,145,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll

[2014/09/17 10:18:27 | 001,600,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\workfolderssvc.dll

[2014/09/17 10:18:24 | 001,231,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll

[2014/09/17 10:18:17 | 000,818,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll

[2014/09/17 10:18:16 | 001,029,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll

[2014/09/17 10:18:15 | 000,674,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll

[2014/09/17 10:18:14 | 000,889,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll

[2014/09/17 10:18:11 | 005,833,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll

[2014/09/17 10:18:10 | 002,574,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL

[2014/09/17 10:18:07 | 000,707,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll

[2014/09/17 10:18:06 | 000,882,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll

[2014/09/17 10:18:05 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll

[2014/09/17 10:18:04 | 001,182,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\printui.dll

[2014/09/17 10:18:01 | 002,410,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVDECOD.DLL

[2014/09/17 10:17:57 | 001,287,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mispace.dll

[2014/09/17 10:17:57 | 000,475,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys

[2014/09/17 10:17:55 | 001,992,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll

[2014/09/17 10:17:52 | 000,486,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netcfgx.dll

[2014/09/17 10:17:51 | 000,770,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkfoldersControl.dll

[2014/09/17 10:17:50 | 000,544,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxPackaging.dll

[2014/09/17 10:17:49 | 001,029,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mispace.dll

[2014/09/17 10:17:47 | 000,391,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netcfgx.dll

[2014/09/17 10:17:44 | 001,057,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\printui.dll

[2014/09/17 10:17:43 | 001,018,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aclui.dll

[2014/09/17 10:17:42 | 001,741,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRH.dll

[2014/09/17 10:17:41 | 000,412,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spaceport.sys

[2014/09/17 10:17:39 | 000,371,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanmsm.dll

[2014/09/17 10:17:37 | 000,360,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll

[2014/09/17 10:17:34 | 000,889,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aclui.dll

[2014/09/17 10:17:34 | 000,355,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll

[2014/09/17 10:17:33 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxPackaging.dll

[2014/09/17 10:17:30 | 000,645,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll

[2014/09/17 10:17:29 | 000,302,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanmsm.dll

[2014/09/17 10:17:25 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll

[2014/09/17 10:17:24 | 000,439,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll

[2014/09/17 10:17:21 | 000,180,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mftranscode.dll

[2014/09/17 10:17:20 | 002,397,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storagewmi.dll

[2014/09/17 10:17:18 | 000,205,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mftranscode.dll

[2014/09/17 10:17:16 | 000,477,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll

[2014/09/17 10:17:15 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\clusapi.dll

[2014/09/17 10:17:14 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll

[2014/09/17 10:17:13 | 001,660,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi

[2014/09/17 10:17:13 | 000,828,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll

[2014/09/17 10:17:13 | 000,287,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usbmon.dll

[2014/09/17 10:17:10 | 000,468,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS

[2014/09/17 10:17:08 | 001,519,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe

[2014/09/17 10:17:05 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wisp.dll

[2014/09/17 10:17:04 | 000,487,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winspool.drv

[2014/09/17 10:17:02 | 001,488,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi

[2014/09/17 10:17:02 | 001,417,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll

[2014/09/17 10:16:58 | 001,356,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe

[2014/09/17 10:16:57 | 001,463,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsecedit.dll

[2014/09/17 10:16:50 | 001,519,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\user32.dll

[2014/09/17 10:16:49 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\clusapi.dll

[2014/09/17 10:16:47 | 000,160,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmmbase.dll

[2014/09/17 10:16:46 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WiFiDisplay.dll

[2014/09/17 10:16:42 | 003,360,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll

[2014/09/17 10:16:42 | 000,806,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll

[2014/09/17 10:16:41 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiobj.dll

[2014/09/17 10:16:39 | 000,356,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\conhost.exe

[2014/09/17 10:16:38 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdvidcrl.dll

[2014/09/17 10:16:37 | 001,817,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Display.dll

[2014/09/17 10:16:35 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll

[2014/09/17 10:16:35 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VAN.dll

[2014/09/17 10:16:33 | 001,404,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\storagewmi.dll

[2014/09/17 10:16:33 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlanapi.dll

[2014/09/17 10:16:32 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSip.dll

[2014/09/17 10:16:30 | 001,844,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Display.dll

[2014/09/17 10:16:29 | 000,388,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll

[2014/09/17 10:16:29 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFoldersGPExt.dll

[2014/09/17 10:16:27 | 000,127,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmmbase.dll

[2014/09/17 10:16:25 | 000,834,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\osk.exe

[2014/09/17 10:16:25 | 000,211,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVol.exe

[2014/09/17 10:16:22 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wisp.dll

[2014/09/17 10:16:20 | 000,667,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll

[2014/09/17 10:16:18 | 000,263,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DafPrintProvider.dll

[2014/09/17 10:16:17 | 000,387,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcryptprimitives.dll

[2014/09/17 10:16:17 | 000,233,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll

[2014/09/17 10:16:14 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxm.dll

[2014/09/17 10:16:13 | 000,335,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcryptprimitives.dll

[2014/09/17 10:16:12 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\NdisImPlatform.sys

[2014/09/17 10:16:08 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.dll

[2014/09/17 10:16:08 | 000,123,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmm.dll

[2014/09/17 10:16:07 | 000,125,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmapi.dll

[2014/09/17 10:16:05 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll

[2014/09/17 10:16:04 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxSip.dll

[2014/09/17 10:16:02 | 001,705,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll

[2014/09/17 10:16:01 | 000,923,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll

[2014/09/17 10:15:59 | 001,319,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsecedit.dll

[2014/09/17 10:15:57 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\prnntfy.dll

[2014/09/17 10:15:56 | 001,656,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll

[2014/09/17 10:15:54 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WorkFoldersShell.dll

[2014/09/17 10:15:52 | 001,089,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpedit.dll

[2014/09/17 10:15:51 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\prnntfy.dll

[2014/09/17 10:15:50 | 001,290,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll

[2014/09/17 10:15:46 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiapi.dll

[2014/09/17 10:15:44 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiapi.dll

[2014/09/17 10:15:40 | 000,180,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SndVol.exe

[2014/09/17 10:15:39 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhsvc.dll

[2014/09/17 10:15:37 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VAN.dll

[2014/09/17 10:15:35 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll

[2014/09/17 10:15:33 | 000,756,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll

[2014/09/17 10:15:30 | 000,263,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe

[2014/09/17 10:15:28 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll

[2014/09/17 10:15:28 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll

[2014/09/17 10:15:26 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdvidcrl.dll

[2014/09/17 10:15:26 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll

[2014/09/17 10:15:24 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanconn.dll

[2014/09/17 10:15:24 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dab.dll

[2014/09/17 10:15:21 | 000,054,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe

[2014/09/17 10:15:20 | 001,048,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gpedit.dll

[2014/09/17 10:15:17 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenter.dll

[2014/09/17 10:15:15 | 000,216,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rsaenh.dll

[2014/09/17 10:15:14 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll

[2014/09/17 10:15:13 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll

[2014/09/17 10:15:11 | 000,779,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\osk.exe

[2014/09/17 10:15:07 | 000,432,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.dll

[2014/09/17 10:15:06 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll

[2014/09/17 10:15:04 | 000,557,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PrintDialogs.dll

[2014/09/17 10:15:02 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DafPrintProvider.dll

[2014/09/17 10:15:00 | 001,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll

[2014/09/17 10:14:58 | 000,659,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll

[2014/09/17 10:14:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansvcpal.dll

[2014/09/17 10:14:51 | 000,832,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActionCenter.dll

[2014/09/17 10:14:50 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\powercfg.cpl

[2014/09/17 10:14:49 | 000,183,808 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Defrag.exe

[2014/09/17 10:14:47 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDRUM.DLL

[2014/09/17 10:14:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDRUM.DLL

[2014/09/17 10:14:44 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll

[2014/09/17 10:14:42 | 001,351,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll

[2014/09/17 10:14:38 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\powercfg.cpl

[2014/09/17 10:14:37 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDRU.DLL

[2014/09/17 10:14:36 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDBASH.DLL

[2014/09/17 10:14:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDYAK.DLL

[2014/09/17 10:14:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDRU1.DLL

[2014/09/17 10:14:31 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BluetoothApis.dll

[2014/09/17 10:14:28 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDRU.DLL

[2014/09/17 10:14:27 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDRU1.DLL

[2014/09/17 10:14:27 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDBASH.DLL

[2014/09/17 10:14:26 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDYAK.DLL

[2014/09/17 10:14:18 | 000,436,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\certcli.dll

[2014/09/17 10:14:16 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\certcli.dll

[2014/09/17 10:14:14 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintDialogs.dll

[2014/09/17 10:14:13 | 001,144,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwanmm.dll

[2014/09/17 10:14:12 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDTAT.DLL

[2014/09/17 10:14:11 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVolSSO.dll

[2014/09/17 10:14:10 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDTAT.DLL

[2014/09/17 10:14:09 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\compstui.dll

[2014/09/17 10:14:08 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BluetoothApis.dll

[2014/09/17 10:14:07 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll

[2014/09/17 10:14:06 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll

[2014/09/17 10:14:01 | 002,100,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlowUI.dll

[2014/09/17 10:14:00 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll

[2014/09/17 10:13:58 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll

[2014/09/17 10:13:57 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll

[2014/09/17 10:13:55 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll

[2014/09/17 10:13:47 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KBDTT102.DLL

[2014/09/17 10:13:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDTT102.DLL

[2014/09/17 10:07:51 | 000,146,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpioclx.sys

[2014/09/16 21:58:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

[2014/09/16 21:57:02 | 000,000,000 | ---D | C] -- C:\Program Files\iPod

[2014/09/16 21:56:59 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes

[2014/09/16 21:56:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes

[2014/09/16 21:56:59 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

[2014/09/12 10:52:17 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MshtmlDac.dll

[2014/09/12 10:52:17 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MshtmlDac.dll

[2014/09/12 10:52:11 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll

[2014/09/12 10:52:11 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll

[2014/09/12 10:52:08 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JavaScriptCollectionAgent.dll

[2014/09/12 10:52:07 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll

[2014/09/12 10:52:07 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll

[2014/09/12 10:51:59 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtmsft.dll

[2014/09/12 10:51:59 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll

[2014/09/12 10:51:55 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll

[2014/09/12 10:51:55 | 000,707,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe

[2014/09/12 10:51:48 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll

[2014/09/12 10:51:48 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll

[2014/09/12 10:51:48 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll

[2014/09/12 10:51:48 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JavaScriptCollectionAgent.dll

[2014/09/12 10:51:30 | 002,104,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl

[2014/09/12 10:51:30 | 002,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl

[2014/09/12 10:51:25 | 005,833,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll

[2 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]

[10 C:\*.tmp files -> C:\*.tmp -> ]

[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/10/11 18:40:00 | 000,000,380 | ---- | M] () -- C:\WINDOWS\tasks\CIMT_S-1-5-21-2564139484-152270176-2040777850-1001.job

[2014/10/11 18:31:05 | 000,004,170 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-6.job

[2014/10/11 18:23:04 | 000,000,988 | ---- | M] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineUA.job

[2014/10/11 18:17:02 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2564139484-152270176-2040777850-1001UA.job

[2014/10/11 14:49:51 | 000,865,408 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI

[2014/10/11 14:49:51 | 000,732,688 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat

[2014/10/11 14:49:51 | 000,136,262 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat

[2014/10/11 14:45:17 | 000,002,487 | ---- | M] () -- C:\Users\Brenda\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk

[2014/10/11 14:45:16 | 000,002,485 | ---- | M] () -- C:\Users\Brenda\Desktop\Google Chrome.lnk

[2014/10/11 14:45:14 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2014/10/11 14:44:11 | 000,004,170 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-3.job

[2014/10/11 14:44:09 | 000,005,196 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-11.job

[2014/10/11 14:44:06 | 000,001,358 | ---- | M] () -- C:\WINDOWS\tasks\CYHPK.job

[2014/10/11 14:44:02 | 000,002,122 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-2.job

[2014/10/11 14:44:01 | 000,002,458 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5_user.job

[2014/10/11 14:44:00 | 000,001,358 | ---- | M] () -- C:\WINDOWS\tasks\OQERG.job

[2014/10/11 14:43:58 | 000,002,458 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5.job

[2014/10/11 14:43:56 | 000,004,506 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-4.job

[2014/10/11 14:43:55 | 000,003,826 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-7.job

[2014/10/11 14:43:55 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job

[2014/10/11 14:43:54 | 000,001,450 | ---- | M] () -- C:\WINDOWS\tasks\22eb117c-b529-406e-8f0f-d191202cd9b1.job

[2014/10/11 14:43:54 | 000,000,652 | ---- | M] () -- C:\WINDOWS\tasks\478c68a8-0496-4731-a071-6c1f8c7c91ad.job

[2014/10/11 14:43:53 | 000,003,134 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-1.job

[2014/10/11 14:43:53 | 000,000,984 | ---- | M] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineCore.job

[2014/10/11 14:43:10 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys

[2014/10/11 14:43:07 | 3336,376,320 | -HS- | M] () -- C:\hiberfil.sys

[2014/10/10 13:18:04 | 000,000,004 | ---- | M] () -- C:\end

[2014/10/10 13:17:06 | 001,544,600 | ---- | M] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\CYHPK.exe

[2014/10/10 13:16:31 | 002,015,640 | ---- | M] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\OQERG.exe

[2014/10/09 07:17:01 | 000,000,878 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2564139484-152270176-2040777850-1001Core.job

[2014/10/08 04:39:44 | 000,110,592 | ---- | M] () -- C:\WINDOWS\SysWow64\installd.exe

[2014/09/30 18:01:27 | 000,001,822 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk

[2014/09/30 17:47:04 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys

[2014/09/30 14:04:32 | 000,492,000 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT

[2014/09/29 01:38:12 | 004,834,816 | ---- | M] () -- C:\WINDOWS\score.exe

[2014/09/18 12:09:39 | 000,139,488 | ---- | M] () -- C:\WINDOWS\SysWow64\XMLOperations.xml

[2014/09/18 00:08:49 | 000,002,413 | ---- | M] () -- C:\Users\Brenda\Desktop\Search.lnk

[2014/09/16 21:58:39 | 000,001,797 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/09/12 10:54:17 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msrating.dll

[2014/09/12 10:53:39 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieetwcollectorres.dll

[2014/09/12 10:53:37 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieetwcollector.exe

[2014/09/12 10:53:37 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieetwproxystub.dll

[2014/09/12 10:53:35 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieetwproxystub.dll

[2014/09/12 10:53:33 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieUnatt.exe

[2014/09/12 10:53:28 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieUnatt.exe

[2014/09/12 10:53:24 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll

[2014/09/12 10:53:24 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll

[2014/09/12 10:53:20 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll

[2014/09/12 10:53:19 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll

[2014/09/12 10:53:02 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msrating.dll

[2 C:\WINDOWS\SysNative\*.tmp files -> C:\WINDOWS\SysNative\*.tmp -> ]

[10 C:\*.tmp files -> C:\*.tmp -> ]

[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]

[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/10/10 13:18:41 | 000,000,380 | ---- | C] () -- C:\WINDOWS\tasks\CIMT_S-1-5-21-2564139484-152270176-2040777850-1001.job

[2014/10/10 13:18:20 | 000,000,988 | ---- | C] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineUA.job

[2014/10/10 13:18:20 | 000,000,984 | ---- | C] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineCore.job

[2014/10/10 13:17:32 | 000,002,458 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5_user.job

[2014/10/10 13:17:31 | 000,002,458 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5.job

[2014/10/10 13:17:27 | 000,001,450 | ---- | C] () -- C:\WINDOWS\tasks\22eb117c-b529-406e-8f0f-d191202cd9b1.job

[2014/10/10 13:17:17 | 000,002,122 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-2.job

[2014/10/10 13:17:08 | 000,003,134 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-1.job

[2014/10/10 13:17:07 | 000,001,358 | ---- | C] () -- C:\WINDOWS\tasks\CYHPK.job

[2014/10/10 13:17:00 | 000,004,506 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-4.job

[2014/10/10 13:16:44 | 000,004,170 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-6.job

[2014/10/10 13:16:43 | 000,003,826 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-7.job

[2014/10/10 13:16:39 | 000,000,652 | ---- | C] () -- C:\WINDOWS\tasks\478c68a8-0496-4731-a071-6c1f8c7c91ad.job

[2014/10/10 13:16:33 | 000,005,196 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-11.job

[2014/10/10 13:16:31 | 000,001,358 | ---- | C] () -- C:\WINDOWS\tasks\OQERG.job

[2014/10/10 13:16:16 | 000,000,978 | ---- | C] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job

[2014/10/10 13:16:14 | 000,004,170 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-3.job

[2014/10/10 13:15:24 | 000,000,004 | ---- | C] () -- C:\end

[2014/10/08 04:39:44 | 000,110,592 | ---- | C] () -- C:\WINDOWS\SysWow64\installd.exe

[2014/09/30 18:01:27 | 000,001,822 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk

[2014/09/18 12:09:39 | 000,139,488 | ---- | C] () -- C:\WINDOWS\SysWow64\XMLOperations.xml

[2014/09/18 00:08:49 | 000,002,511 | ---- | C] () -- C:\Users\Brenda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

[2014/09/18 00:08:49 | 000,002,413 | ---- | C] () -- C:\Users\Brenda\Desktop\Search.lnk

[2014/09/17 10:13:46 | 000,387,391 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml

[2014/09/16 21:58:39 | 000,001,797 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk

[2014/09/01 04:18:44 | 000,002,086 | ---- | C] () -- C:\Users\Brenda\AppData\Roaming\CYHPK

[2014/09/01 04:18:44 | 000,001,248 | ---- | C] () -- C:\Users\Brenda\AppData\Roaming\OQERG

[2014/08/22 22:52:07 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2014/08/12 19:07:34 | 004,834,816 | ---- | C] () -- C:\WINDOWS\score.exe

[2014/05/21 00:33:38 | 000,348,088 | ---- | C] () -- C:\WINDOWS\SysWow64\igdmd32.dll

[2014/05/21 00:33:32 | 000,183,808 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll

[2014/05/21 00:33:32 | 000,142,848 | ---- | C] () -- C:\WINDOWS\SysWow64\igdail32.dll

[2014/03/18 06:13:28 | 000,002,255 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini

[2014/03/18 06:13:03 | 000,103,936 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll

[2014/02/21 09:51:26 | 000,000,081 | ---- | C] () -- C:\Users\Brenda\AppData\Roaming\WB.CFG

[2013/08/22 11:36:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat

[2013/08/22 11:36:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT

[2013/08/22 10:46:23 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2013/08/22 03:01:23 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin

[2013/08/21 23:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll

[2013/08/21 19:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll

[2013/08/21 19:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat

[2013/04/12 21:28:33 | 000,000,017 | ---- | C] () -- C:\Users\Brenda\AppData\Local\resmon.resmoncfg

[2013/01/26 21:36:27 | 000,880,342 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI

[2013/01/26 20:06:17 | 000,598,780 | ---- | C] () -- C:\WINDOWS\SysWow64\igvpkrng700.bin

[2013/01/26 20:06:09 | 000,755,048 | ---- | C] () -- C:\WINDOWS\SysWow64\igcodeckrng700.bin

========== ZeroAccess Check ==========

[2014/08/24 12:19:15 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2014/07/24 11:20:40 | 021,266,336 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2014/07/24 09:46:53 | 018,760,328 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013/08/22 05:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2013/08/21 22:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013/08/22 05:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== Alternate Data Streams ==========

@Alternate Data Stream - 237 bytes -> C:\Users\Brenda\OneDrive:ms-properties

< End of report >

Thank you in advance for any help you can give

#2
zep516

Posted 11 October 2014 - 10:00 PM

Trusted Helper

Malware Removal
8,093 posts

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

We need to fix some things using OTL Make sure you copy it all as it's large !

Double click on the to open the program. On Vista/Win7/Win8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.

Under the Custom Scans/Fixes box at the bottom, paste in the following

:COMMANDS
[CREATERESTOREPOINT]

:OTL
[2014/09/18 00:09:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LPT
[2014/09/18 00:07:55 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Local\LPT
[2014/09/18 00:07:54 | 000,000,000 | ---D | C] -- C:\Users\Brenda\AppData\Local\Smartbar
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.c...q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.c...q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.zyngaplayersupport.com [Binary data over 200 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.c...Z-ajrppXLIGHMtg,
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.c...q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.c...q={searchTerms}
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn6\yt.dll (Yahoo! Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...q={searchTerms}
IE - HKLM\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...q={searchTerms}
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
CHR - Extension: HQuality-v3V05.10 = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb\1.26.53_0\
CHR - Extension: HQuality-v3V05.10 = C:\Users\Brenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb\1.26.53_0\
O2:64bit: - BHO: (HQuality-v3V05.10) - {11111111-1111-1111-1111-110611171162} - C:\Program Files (x86)\HQuality-v3V05.10\HQuality-v3V05.10-bho64.dll (HQuality3V05.10)
O2:64bit: - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - No CLSID value found.
02 - BHO: (HQuality-v3V05.10) - {11111111-1111-1111-1111-110611171162} - C:\Program Files (x86)\HQuality-v3V05.10\HQuality-v3V05.10-bho.dll (HQuality3V05.10)
O2 - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - No CLSID value found.
O2 - BHO: (Rich Media View) - {59dcb6e8-6cc8-4903-a78c-00356115d270} - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release7142\ie\RichMediaViewV1release7142.dll File not found
O2 - BHO: (no name) - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O20:64bit: - AppInit_DLLs: (C:\Users\Brenda\AppData\Local\Smartbar\Application\Resources\crdlil64.dll) - C:\Users\Brenda\AppData\Local\Smartbar\Application\Resources\crdlil64.dll ()[[2014/10/10 13:18:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Consumer Input
[2014/10/10 13:17:06 | 001,544,600 | ---- | C] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\CYHPK.exe
[2014/10/10 13:16:31 | 002,015,640 | ---- | C] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\OQERG.exe
[10 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[1 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
[2014/10/11 14:44:11 | 000,004,170 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-3.job
[2014/10/11 14:44:09 | 000,005,196 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-11.job
[2014/10/11 14:44:06 | 000,001,358 | ---- | M] () -- C:\WINDOWS\tasks\CYHPK.job
[2014/10/11 14:44:02 | 000,002,122 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-2.job
[2014/10/11 14:44:01 | 000,002,458 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5_user.job
[2014/10/11 14:44:00 | 000,001,358 | ---- | M] () -- C:\WINDOWS\tasks\OQERG.job
[2014/10/11 14:43:56 | 000,004,506 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-4.job
[2014/10/11 14:43:55 | 000,003,826 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-7.job
[2014/10/11 14:43:55 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job
[2014/10/11 14:43:54 | 000,001,450 | ---- | M] () -- C:\WINDOWS\tasks\22eb117c-b529-406e-8f0f-d191202cd9b1.job
[2014/10/11 14:43:54 | 000,000,652 | ---- | M] () -- C:\WINDOWS\tasks\478c68a8-0496-4731-a071-6c1f8c7c91ad.job
[2014/10/11 14:43:53 | 000,003,134 | ---- | M] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-1.job
[2014/10/11 14:43:53 | 000,000,984 | ---- | M] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineCore.job
[2014/10/10 13:18:04 | 000,000,004 | ---- | M] () -- C:\end
[2014/10/10 13:17:06 | 001,544,600 | ---- | M] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\CYHPK.exe
[2014/10/10 13:16:31 | 002,015,640 | ---- | M] (HQuality3V05.10) -- C:\Users\Brenda\AppData\Roaming\OQERG.exe
[2014/10/10 13:18:41 | 000,000,380 | ---- | C] () -- C:\WINDOWS\tasks\CIMT_S-1-5-21-2564139484-152270176-2040777850-1001.job
[2014/10/10 13:18:20 | 000,000,988 | ---- | C] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineUA.job
[2014/10/10 13:18:20 | 000,000,984 | ---- | C] () -- C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineCore.job
[2014/10/10 13:17:32 | 000,002,458 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5_user.job
[2014/10/10 13:17:31 | 000,002,458 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5.job
[2014/10/10 13:17:27 | 000,001,450 | ---- | C] () -- C:\WINDOWS\tasks\22eb117c-b529-406e-8f0f-d191202cd9b1.job
[2014/10/10 13:17:17 | 000,002,122 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-2.job
[2014/10/10 13:17:08 | 000,003,134 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-1.job
[2014/10/10 13:17:07 | 000,001,358 | ---- | C] () -- C:\WINDOWS\tasks\CYHPK.job
[2014/10/10 13:17:00 | 000,004,506 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-4.job
[2014/10/10 13:16:44 | 000,004,170 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-6.job
[2014/10/10 13:16:43 | 000,003,826 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-7.job
[2014/10/10 13:16:39 | 000,000,652 | ---- | C] () -- C:\WINDOWS\tasks\478c68a8-0496-4731-a071-6c1f8c7c91ad.job
[2014/10/10 13:16:33 | 000,005,196 | ---- | C] () -- C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-11.job
[2014/10/10 13:16:31 | 000,001,358 | ---- | C] () -- C:\WINDOWS\tasks\OQERG.job
File not found (No name found) -- C:\PROGRAM FILES (X86)\BETTERSURF\BETTERSURFPLUS\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIABUZZV1\MEDIABUZZV1MODE3344\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAPLAYERV1\MEDIAPLAYERV1ALPHA485\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAVIEWERV1\MEDIAVIEWERV1ALPHA221\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAVIEWV1\MEDIAVIEWV1ALPHA1935\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAVIEWV1\MEDIAVIEWV1ALPHA9027\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\MEDIAWATCHV1\MEDIAWATCHV1HOME831\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\RICHMEDIAVIEWV1\RICHMEDIAVIEWV1RELEASE7142\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\TRUSTMEDIAVIEWERV1\TRUSTMEDIAVIEWERV1ALPHA2867\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\VIDEOPLAYERV3\VIDEOPLAYERV3BETA1213\FF
File not found (No name found) -- C:\PROGRAM FILES (X86)\WEBEXPENHANCEDV1\WEBEXPENHANCEDV1ALPHA42\FF

:Files
ipconfig /flushdns /c
C:\Users\Brenda\AppData\Roaming\OQERG.exe
C:\Users\Brenda\AppData\Roaming\CYHPK.exe
C:\WINDOWS\tasks\ConsumerInputUpdateTaskMachineCore.job
C:\WINDOWS\tasks\478c68a8-0496-4731-a071-6c1f8c7c91ad.job
C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-7.job
C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-4.job
C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-3.job
C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-11.job
C:\WINDOWS\tasks\CYHPK.job
C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-2.job
C:\WINDOWS\tasks\4e250024-6600-404c-ba9b-838317176ea2-5_user.job
C:\WINDOWS\tasks\OQERG.job
C:\Program Files (x86)\HQuality-v3V05.10
C:\Program Files (x86)\Consumer Input
C:\Users\Brenda\AppData\Roaming\CYHPK.exe
C:\Users\Brenda\AppData\Roaming\OQERG.exe
C:\Program Files (x86)\HQuality-v3V05.10\22eb117c-b529-406e-8f0f-d191202cd9b1.exe
C:\Program Files (x86)\HQuality-v3V05.10\4e250024-6600-404c-ba9b-838317176ea2-6.exe
C:\Program Files (x86)\LPT\srptsl.exe
C:\Program Files (x86)\LPT\srpts.exe
C:\Users\Brenda\AppData\Local\LPT\srptm.exe
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.exe
C:\Users\Brenda\AppData\Local\Smartbar\Application\Lrcnta.exe
C:\Program Files (x86)\Consumer Input\Monitoring\dca-monitoring.exe
C:\Users\Brenda\AppData\Local\Smartbar\Application\srut.dll
C:\Users\Brenda\AppData\Local\LPT\srut.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\srsbs.dll
C:\Users\Brenda\AppData\Local\LPT\srptm.exe
C:\Users\Brenda\AppData\Local\LPT\srpt.dll
C:\Users\Brenda\AppData\Local\LPT\srptc.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\srom.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\srpdm.dll
C:\Users\Brenda\AppData\Local\LPT\srpdm.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\srns.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\srbu.dll
C:\Users\Brenda\AppData\Local\LPT\srbu.dll
C:\Users\Brenda\AppData\Local\LPT\sreu.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\srau.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\sppsm.dll
C:\Users\Brenda\AppData\Local\LPT\sppsm.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\spbl.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\smtu.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\smti.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\smsp.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\smta.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
C:\Users\Brenda\AppData\Local\LPT\Smartbar.Resources.HistoryAndStatsWrapper.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
C:\Users\Brenda\AppData\Local\LPT\Smartbar.Personalization.Common.dll
C:\Users\Brenda\AppData\Local\LPT\Smartbar.Monetization.Proxy.ProxyService.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
C:\Users\Brenda\AppData\Local\LPT\Smartbar.Infrastructure.Utilities.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\siem.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\sidc.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\sgmu.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\sgml.dll
C:\Users\Brenda\AppData\Local\LPT\Smartbar.Common.dll
C:\Users\Brenda\AppData\Local\LPT\ProxySettings.dll
C:\Users\Brenda\AppData\Local\LPT\Proxy.Lib.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\lrcnt.dll
C:\Users\Brenda\AppData\Local\Smartbar\Application\Lrcnta.exe

:Commands

[emptytemp]
[resethosts]

Make sure all other windows are closed.
Click the Run Fix button at the top
Let the program run uninterrupted. The computer should reboot when the scan is done. If not, please reboot the computer.
Post the log that is found in C:\_OTL\Moved Files in your next reply.
Open OTL again and click the Quick Scan button.
Next

Please download AdwCleaner by Xplode onto your Desktop.
- Close all open programs and internet browsers.
- Double click on AdwCleaner.exe to run the tool.
- Click the Scan button and wait for the process to complete.
- Click the Report button and the report will open in Notepad.
- NOTE: If you get an error message, it means that nothing was found. Exit from AdwCleaner.
- Click on the Clean button follow the prompts.
- A log file will automatically open after the scan has finished and the PC has rebooted.
- Please post the content of that log file with your next answer.
- You can find the log file at C:\AdwCleaner
Next

Please download Junkware Removal Tool to your Desktop.

Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.

In your next reply to me post:
- OTL Fix log. That log will pop up in front of you, after you run the fix and the computer reboots
- AdwCleaner log after running the clean option.
- JRT.txt log
- New OTL after quick scan is performed

Thanks
Joe

#3
Brenda50

Posted 12 October 2014 - 02:12 PM

Member

Topic Starter
Member
30 posts

Hi Joe,

I'm having a tough time with this so please bear with me. this is my 3rd attempt to send this post.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.3.2 (10.09.2014:1)

OS: Windows 8.1 x64

Ran by Brenda on Sun 10/12/2014 at 13:20:28.00

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\MarineAquarium3Free_57.SkinLauncher

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\MarineAquarium3Free_57.SkinLauncher.1

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\PopularScreensavers_7i.SkinLauncher

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\PopularScreensavers_7i.SkinLauncher.1

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\MyFunCards_5m.ToolbarProtector

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\MyFunCards_5m.ToolbarProtector.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111991162}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111991162}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\ShoppingChip

Successfully deleted: [Folder] "C:\ProgramData\fighters"

Successfully deleted: [Folder] "C:\Users\Brenda\AppData\Roaming\ask4expert"

Successfully deleted: [Folder] "C:\Users\Brenda\appdata\locallow\yahoocouponaddon"

Successfully deleted: [Folder] "C:\Program Files (x86)\ask4expert"

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\we-care reminder"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Sun 10/12/2014 at 13:22:57.19

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

OTL logfile created on: 10/12/2014 1:31:03 PM - Run 4

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Brenda\Downloads

64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.17278)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.88 Gb Total Physical Memory | 2.68 Gb Available Physical Memory | 69.09% Memory free

6.01 Gb Paging File | 4.48 Gb Available in Paging File | 74.55% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 455.90 Gb Total Space | 337.52 Gb Free Space | 74.03% Space Free | Partition Type: NTFS

Computer Name: BRENDAPC | User Name: Brenda | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days